Critical WP Maps Pro Flaw Actively Exploited to Create Admin Accounts

WP Maps Pro WordPress flaw exploited to create admin accounts

Unauthenticated attackers exploited CVE-2026-8732 in WP Maps Pro (15k+ sales) to create admin accounts; Wordfence blocked 2,858 attacks in 24 hours before patch v6.1.1. Plugin distributed outside WordPress.org auto-update channel leaves installations unpatched; disclosure-to-exploitation window now hours-long, demanding immediate update or disable.